Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a3a2f33322d3332203d3e20323632373439.roa
File:                     323830343a3138343a3a2f33322d3332203d3e20323632373439.roa (raw, json)
Hash identifier:          z1GXRUWNy6MWsi36mNAfx7DpGkxuB+4/AWlr+ESxQJ0=
Subject key identifier:   CB:60:4F:34:D1:E5:13:DE:70:CA:EF:BF:36:40:E9:BE:6D:9B:4E:93
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       69C2BDD1AD794C2B34C534BBD379DDF8D66D7985
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a3a2f33322d3332203d3e20323632373439.roa
Signing time:             Wed 21 Feb 2024 14:00:21 +0000
ROA not before:           Wed 21 Feb 2024 13:55:21 +0000
ROA not after:            Wed 19 Feb 2025 14:00:21 +0000
asID:                     262749
IP address blocks:        2804:184::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c2:bd:d1:ad:79:4c:2b:34:c5:34:bb:d3:79:dd:f8:d6:6d:79:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 21 13:55:21 2024 GMT
            Not After : Feb 19 14:00:21 2025 GMT
        Subject: CN=CB604F34D1E513DE70CAEFBF3640E9BE6D9B4E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:90:25:68:bd:d1:c8:68:93:48:94:65:4b:
                    7b:f8:50:a7:63:49:be:a3:c9:53:e6:25:41:2c:de:
                    f7:c6:28:6c:50:ee:a3:5c:7f:a2:76:52:a1:db:e5:
                    73:0b:e8:c4:be:9b:d4:a9:6a:a6:21:4a:87:4e:11:
                    39:20:08:8e:fb:7e:48:1c:50:04:cd:9d:ff:bb:0a:
                    96:9a:78:9a:16:35:67:23:d5:a1:c7:92:00:68:6e:
                    d6:c8:22:b1:f3:9d:75:5b:1d:b3:13:f0:2f:a0:94:
                    7b:7a:b8:a5:46:dc:e5:04:ff:97:2f:2a:9e:86:50:
                    05:90:ed:a0:29:6d:bd:be:ea:4c:a4:36:b0:3a:66:
                    12:1e:c9:81:67:af:9d:57:c5:9c:b1:4f:d7:77:a8:
                    32:9b:fe:dd:4b:e0:dd:4a:ad:e8:43:0a:ea:19:5b:
                    f8:16:50:64:e7:d1:eb:a0:6c:13:31:ff:41:24:d6:
                    f3:c4:02:b1:5e:1b:29:83:df:c8:9a:e1:ce:1e:d7:
                    98:7a:95:23:a6:be:db:8b:ae:6f:2c:4e:10:64:e6:
                    78:ac:64:c4:dd:6c:8f:50:8c:91:4e:99:31:30:f4:
                    88:9b:7e:3d:28:2f:a9:14:82:fe:56:34:19:f6:06:
                    b5:64:4c:07:ad:8b:a3:d7:90:a6:db:a3:1d:e8:d9:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:60:4F:34:D1:E5:13:DE:70:CA:EF:BF:36:40:E9:BE:6D:9B:4E:93
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a3a2f33322d3332203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:f7:9b:f3:23:51:5a:e7:2d:18:63:53:de:52:9d:69:dc:
         21:e9:86:c8:72:d3:f9:9c:ad:30:b1:f3:de:f4:49:bf:27:56:
         a9:59:11:ab:bd:01:37:8d:fb:c3:87:e1:e5:a3:c8:f9:30:d2:
         01:cf:21:66:a7:40:0c:c5:c2:86:95:3b:70:af:7e:48:4e:04:
         a1:68:b8:d8:d1:35:f5:20:4f:83:0c:47:21:75:53:6c:5a:f6:
         ce:7a:18:ec:9a:df:ae:4d:f9:6c:c5:13:20:63:a8:38:90:53:
         1c:c4:36:b7:a2:2e:1c:35:32:1b:7c:a1:a7:2a:20:46:6c:cb:
         4f:2d:9c:7e:0b:35:e9:a6:a9:fc:43:e9:a8:36:d3:a7:4e:fb:
         10:31:67:07:5e:b8:9f:cd:44:09:1b:cb:13:26:44:35:c6:7d:
         a3:12:77:13:6c:8c:38:87:31:c1:67:bf:c6:ac:91:0d:72:fa:
         83:d4:02:bc:95:69:02:63:3b:a0:9c:49:d2:a9:70:2f:d4:ee:
         1a:50:1b:cf:90:76:5a:96:6e:93:7d:b0:2e:22:95:89:ed:66:
         3e:36:31:70:00:2b:ba:70:05:06:d8:17:70:db:5f:a2:76:ac:
         a5:b9:b5:75:1f:d5:47:7a:fb:83:cd:04:4a:64:19:1e:ef:f1:
         be:b4:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----